CVE-2020-12243: Apple Mac OS X

High severity, CVSS 7.5. EPSS: 4.4% chance of exploitation in the next 30 days.

In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).

Affected products

• Apple Mac OS X: from 10.13.0, before 10.13.6 (fixed in 10.13.6); from 10.14.0, before 10.14.6 (fixed in 10.14.6); from 10.15, before 10.15.6 (fixed in 10.15.6); version 10.13.6 only; version 10.14.6 only
• Broadcom Brocade Fabric Operating System: affected versions not specified
• Canonical Ubuntu Linux: version 12.04 only; version 14.04 only; version 16.04 only; version 18.04 only; version 19.10 only; version 20.04 only
• Debian Debian Linux: version 8.0 only; version 9.0 only; version 10.0 only
• Netapp Cloud Backup: affected versions not specified
• Netapp h300e Firmware: affected versions not specified
• Netapp h300s Firmware: affected versions not specified
• Netapp h410c Firmware: affected versions not specified
• Netapp h410s Firmware: affected versions not specified
• Netapp h500e Firmware: affected versions not specified
• Netapp h500s Firmware: affected versions not specified
• Netapp h700e Firmware: affected versions not specified
• Netapp h700s Firmware: affected versions not specified
• Netapp Steelstore Cloud Integrated Storage: affected versions not specified
• Openldap Openldap: before 2.4.50 (fixed in 2.4.50)
• Opensuse Leap: version 15.1 only
• Oracle Solaris: version 10 only; version 11 only
• Oracle ZFS Storage Appliance Kit: version 8.8 only

Published 2020-04-28. Last modified 2026-06-17.